@contenthero/mcp 0.4.11 → 0.4.13

package/dist/widget/generation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generation.d.ts","sourceRoot":"","sources":["../../src/widget/generation.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,sBAAsB,kr9xBAAkr9xB,CAAA;AACrt9xB,eAAO,MAAM,eAAe,WAAW,CAAA"}
+{"version":3,"file":"generation.d.ts","sourceRoot":"","sources":["../../src/widget/generation.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,sBAAsB,gh4yBAAgh4yB,CAAA;AACnj4yB,eAAO,MAAM,eAAe,WAAW,CAAA"}

package/dist/widget-uri.d.ts

@@ -8,5 +8,24 @@
  * ⭐ It lives here rather than in `server.ts` because `format.ts` must not import the server (the server
  * imports the formatter, and the cycle would be real).
  */
-export declare const GENERATION_WIDGET_URI = "ui://contenthero/generation.html";
+/**
+ * ⭐⭐⭐ **VERSION-STAMPED, BECAUSE A HOST CACHES THIS BY NAME AND A FIXED NAME NEVER INVALIDATES.**
+ *
+ * This was `ui://contenthero/generation.html`, one constant string for every build this server has ever
+ * shipped. A host that caches a resource by its uri, which is the obvious thing to do for an identifier, then
+ * serves the FIRST widget it ever loaded for the rest of time, and every fix after that is invisible no
+ * matter how many times the package is published.
+ *
+ * ⚠️ It also collided ACROSS SERVERS. A published ContentHero and a local build connected at once both
+ * advertised this exact string, so one cache entry stood for two different widgets and which one won was not
+ * something either server decided. That is the configuration a widget is actually developed in.
+ *
+ * ⭐ Deriving it from the package version costs nothing and makes every publish cache-safe by construction:
+ * new bytes always arrive under a new name. Both the resource registration and the `_meta` bindings import
+ * this one constant, so they cannot disagree about which name was advertised.
+ *
+ * ⚠️ WHAT THIS DOES NOT FIX: two builds of the SAME version still share a name, which is the local
+ * development case. Bump the version, or accept that a same-version rebuild may be served from cache.
+ */
+export declare const GENERATION_WIDGET_URI = "ui://contenthero/generation-0.4.13.html";
 //# sourceMappingURL=widget-uri.d.ts.map

package/dist/widget-uri.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"widget-uri.d.ts","sourceRoot":"","sources":["../src/widget-uri.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,qCAAqC,CAAA"}
+{"version":3,"file":"widget-uri.d.ts","sourceRoot":"","sources":["../src/widget-uri.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,qBAAqB,4CAAwD,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contenthero/mcp",
-  "version": "0.4.11",
+  "version": "0.4.13",
   "description": "Official ContentHero MCP server. Generate images, video, and audio from any MCP client (Claude Code, Claude Desktop, etc.) using your ContentHero API key.",
   "type": "module",
   "bin": {
@@ -13,11 +13,12 @@
     "README.md"
   ],
   "scripts": {
-    "build": "node widget/guard.mjs && tsc --noEmit -p widget/tsconfig.json && node widget/build.mjs && tsc",
+    "build": "node widget/guard.mjs && tsc --noEmit -p widget/tsconfig.json && node widget/build.mjs && tsc --emitDeclarationOnly && node build-server.mjs",
     "clean": "rm -rf dist",
     "test": "tsx --test \"src/**/*.test.ts\"",
     "prepublishOnly": "npm run clean && npm run build",
-    "verify:inline": "node scripts/verify-inline-media.mjs"
+    "verify:inline": "node scripts/verify-inline-media.mjs",
+    "verify:tarball": "node scripts/verify-tarball.mjs"
   },
   "publishConfig": {
     "access": "public"
@@ -42,13 +43,13 @@
   "license": "MIT",
   "private": false,
   "dependencies": {
-    "@contenthero/sdk": "^0.4.7",
+    "@contenthero/sdk": "^0.4.9",
     "@modelcontextprotocol/ext-apps": "2.0.0",
     "@modelcontextprotocol/sdk": "1.26.0",
     "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@contenthero-ai/brand-ui": "0.1.0",
+    "@contenthero-ai/brand-ui": "0.1.2",
     "@lobehub/icons": "5.10.0",
     "@types/node": "^22.19.19",
     "@types/react": "19.2.2",

package/dist/client.js

@@ -1,54 +0,0 @@
-/**
- * Lazy ContentHero SDK client, configured from the environment.
- *
- * Resolution goes through the SDK's shared auth ladder: an explicit value, then
- * CONTENTHERO_API_KEY, then the credential written by `contenthero login` at
- * ~/.contenthero/credentials. It is deferred to first use so the server can start
- * and advertise its tools even before a key is present; the missing-key error then
- * surfaces as a tool-call result rather than a crash.
- *
- * ## Why the ladder, and not just the env var
- *
- * Reading only the environment is what forced every ContentHero entry in `.mcp.json`
- * to carry a plaintext `ch_live_` key inline in its command string, and made pointing
- * the MCP at a different account a three-file edit. With the ladder, an account is a
- * profile directory: set CONTENTHERO_CONFIG_DIR and no secret needs to live in any
- * editor config at all.
- *
- * ⚠️ THE CLIENT IS CACHED FOR THE PROCESS LIFETIME, so switching accounts requires
- * restarting the MCP server. That is deliberate. A key that could change underneath a
- * running session would let a generation land in, and bill, an account nobody at the
- * keyboard chose, and generations are not refundable.
- */
-import { ContentHero } from '@contenthero/sdk';
-import { configDir, resolveAuth } from '@contenthero/sdk/credentials';
-let cached;
-export function getClient() {
-    if (cached)
-        return cached;
-    const { apiKey, keySource, baseUrl } = resolveAuth();
-    if (!apiKey) {
-        throw new Error('No ContentHero API key found. Set CONTENTHERO_API_KEY in the MCP server env, ' +
-            `or run \`contenthero login\` to store one (looked in ${configDir()}).`);
-    }
-    // Announced once, on stderr so it never corrupts the stdio protocol stream. Which ACCOUNT an MCP server is
-    // acting as is the single most consequential thing about it and was previously invisible: the only way to
-    // find out was to call get_balance and recognize the number.
-    console.error(`[contenthero-mcp] authenticated from ${keySource} (config dir: ${configDir()})`);
-    cached = new ContentHero({
-        apiKey,
-        baseUrl,
-        // Tag spends from the stdio MCP as the 'mcp' transport channel, matching the
-        // hosted OAuth MCP. The MCP spends through an api key, so this header is what
-        // distinguishes it from a raw api-key or cli caller on credit_transactions.
-        fetch: (input, init) => fetch(input, {
-            ...init,
-            headers: {
-                ...init?.headers,
-                'X-ContentHero-Channel': 'mcp',
-            },
-        }),
-    });
-    return cached;
-}
-//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAErE,IAAI,MAA+B,CAAA;AAEnC,MAAM,UAAU,SAAS;IACvB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IACzB,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,CAAA;IACpD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,wDAAwD,SAAS,EAAE,IAAI,CAC1E,CAAA;IACH,CAAC;IACD,2GAA2G;IAC3G,0GAA0G;IAC1G,6DAA6D;IAC7D,OAAO,CAAC,KAAK,CAAC,wCAAwC,SAAS,iBAAiB,SAAS,EAAE,GAAG,CAAC,CAAA;IAC/F,MAAM,GAAG,IAAI,WAAW,CAAC;QACvB,MAAM;QACN,OAAO;QACP,6EAA6E;QAC7E,8EAA8E;QAC9E,4EAA4E;QAC5E,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACrB,KAAK,CAAC,KAAK,EAAE;YACX,GAAG,IAAI;YACP,OAAO,EAAE;gBACP,GAAI,IAAI,EAAE,OAA8C;gBACxD,uBAAuB,EAAE,KAAK;aAC/B;SACF,CAAC;KACL,CAAC,CAAA;IACF,OAAO,MAAM,CAAA;AACf,CAAC"}